This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft File: d44TTk_7X7E6woT-lIgnaCYVZjI.mft (raw, json) Hash identifier: VXyUQ19c+4dfj1Ytor01jxUGQwn3vY2AR8y97Rp3CQA= Subject key identifier: 51:E3:8E:16:F6:5F:4D:87:38:86:EF:D8:73:BF:B8:3E:2C:39:32:C4 Authority key identifier: 77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32 Certificate issuer: /CN=778e134e4ffb5fb13ac284fe9488276826156632 Certificate serial: 019BF6BF0C05E239012342A56A579F4BCCC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft Manifest number: 0D44 Signing time: Sun 25 Jan 2026 20:01:13 +0000 Manifest this update: Sun 25 Jan 2026 20:01:13 +0000 Manifest next update: Mon 26 Jan 2026 20:01:13 +0000 Files and hashes: 1: d44TTk_7X7E6woT-lIgnaCYVZjI.crl (hash: fSpzmsrtJPnE6vm9/d6/oCn5PCxpkyfRYSOEEaKhHx0=) 2: gabLNz-9haR8x0JVvUH9RWZfT3o.roa (hash: elMsH5/2kflaBwBGb1wo4RBVBbTZ4kW2OpPSbwpINts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:0c:05:e2:39:01:23:42:a5:6a:57:9f:4b:cc:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=778e134e4ffb5fb13ac284fe9488276826156632 Validity Not Before: Jan 25 20:01:13 2026 GMT Not After : Jan 26 20:01:13 2026 GMT Subject: CN=51e38e16f65f4d873886efd873bfb83e2c3932c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e1:97:f1:92:ac:e2:a6:47:ba:ab:25:41:df: 2b:bf:ef:b1:cc:e9:b7:74:72:53:10:dd:b5:cb:2c: 5e:53:92:66:dc:d9:98:d0:13:20:cd:f8:f4:97:21: bd:e3:64:44:8a:cc:9e:51:2e:34:1a:72:9c:53:dd: 1a:32:61:da:78:f6:da:bb:b4:4d:0f:6b:15:7d:1e: 0b:7c:fa:22:79:0a:85:94:ea:28:e5:d5:9e:ff:95: a7:23:53:99:85:59:52:7c:7b:ef:d7:24:9f:3b:6f: f1:2f:50:92:b1:40:eb:62:fe:3a:7c:35:54:29:d6: 4d:83:26:19:6a:cc:67:69:cc:9f:96:ce:09:15:74: d7:f0:a4:2f:93:fd:33:7f:f7:47:3b:1c:65:26:13: 8a:e1:02:8d:fe:7e:12:e8:4c:b0:34:a5:91:e2:76: 1a:b9:6f:75:00:5f:ed:0b:e0:54:b4:6a:59:fa:ff: b8:f2:dd:eb:b8:8e:33:97:f9:79:ce:f2:02:4c:ac: 6b:56:87:43:11:78:2c:11:25:35:01:e6:22:1c:96: 0c:0f:a9:b4:4d:d7:4d:03:05:37:78:91:6f:de:a1: 21:9b:87:cc:0d:88:b7:e0:c5:76:42:dc:13:b9:b6: da:16:43:0a:09:1e:3f:1e:1b:41:00:18:c5:1a:c5: 8c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E3:8E:16:F6:5F:4D:87:38:86:EF:D8:73:BF:B8:3E:2C:39:32:C4 X509v3 Authority Key Identifier: keyid:77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:ed:f9:5c:c0:44:f8:d6:58:ef:37:c0:f6:4a:0b:a1:84:24: 84:03:aa:64:aa:0f:15:7d:06:e5:df:cd:4e:9b:b0:63:c8:8f: 07:e1:7e:e3:a9:81:ca:91:28:f3:6a:5a:65:98:7f:e5:bf:15: 5f:98:0a:c0:9a:22:46:11:05:a7:d1:a1:c2:3b:44:91:f9:b1: 17:11:1a:a5:41:a2:7c:44:80:b2:87:c0:e1:13:97:80:35:0f: a1:ee:15:7c:b9:19:75:d9:23:bd:8c:71:c3:f3:7e:f4:7d:ab: 86:9f:e6:9d:1d:85:71:ec:76:59:ad:44:89:3c:ab:fa:69:fd: d3:b3:49:19:fc:b9:0c:4c:a3:8e:ad:25:3b:cb:6f:df:5c:94: 23:6e:00:6c:69:59:38:fb:8f:ec:81:45:bf:a6:55:5f:5a:e7: 6b:bc:4a:ee:ec:90:b3:1c:fa:36:99:f4:e9:ae:b5:12:13:92: ad:7a:1e:56:f4:3c:4b:f1:29:e3:7a:68:a3:75:5c:f7:3e:75: 52:27:f1:60:d6:c4:08:c2:a8:e0:7b:6a:4b:b7:2a:42:af:10: be:02:ed:5d:2e:de:65:52:70:21:a3:2f:7a:75:4e:db:a2:76: 9d:09:99:af:3f:ff:4f:b1:3a:a6:b0:4c:94:71:58:7f:48:8b: 35:c4:c5:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vwwF4jkBI0KlalefS8zFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3OGUxMzRlNGZmYjVmYjEzYWMyODRmZTk0ODgyNzY4MjYx NTY2MzIwHhcNMjYwMTI1MjAwMTEzWhcNMjYwMTI2MjAwMTEzWjAzMTEwLwYDVQQD Eyg1MWUzOGUxNmY2NWY0ZDg3Mzg4NmVmZDg3M2JmYjgzZTJjMzkzMmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveGX8ZKs4qZHuqslQd8rv++xzOm3 dHJTEN21yyxeU5Jm3NmY0BMgzfj0lyG942REisyeUS40GnKcU90aMmHaePbau7RN D2sVfR4LfPoieQqFlOoo5dWe/5WnI1OZhVlSfHvv1ySfO2/xL1CSsUDrYv46fDVU KdZNgyYZasxnacyfls4JFXTX8KQvk/0zf/dHOxxlJhOK4QKN/n4S6EywNKWR4nYa uW91AF/tC+BUtGpZ+v+48t3ruI4zl/l5zvICTKxrVodDEXgsESU1AeYiHJYMD6m0 TddNAwU3eJFv3qEhm4fMDYi34MV2QtwTubbaFkMKCR4/HhtBABjFGsWM2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHjjhb2X02HOIbv2HO/uD4sOTLEMB8GA1UdIwQY MBaAFHeOE05P+1+xOsKE/pSIJ2gmFWYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81ODQxYjEtMDEyZi00MDQ2LWIxZDUt MDk5YmFkMDM3NjhlLzEvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy81ODQxYjEtMDEyZi00MDQ2LWIxZDUtMDk5YmFkMDM3Njhl LzEvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+35XMBE +NZY7zfA9koLoYQkhAOqZKoPFX0G5d/NTpuwY8iPB+F+46mBypEo82paZZh/5b8V X5gKwJoiRhEFp9GhwjtEkfmxFxEapUGifESAsofA4ROXgDUPoe4VfLkZddkjvYxx w/N+9H2rhp/mnR2Fcex2Wa1EiTyr+mn907NJGfy5DEyjjq0lO8tv31yUI24AbGlZ OPuP7IFFv6ZVX1rna7xK7uyQsxz6Npn06a61EhOSrXoeVvQ8S/Ep43poo3Vc9z51 UifxYNbECMKo4HtqS7cqQq8QvgLtXS7eZVJwIaMvenVO26J2nQmZrz//T7E6prBM lHFYf0iLNcTFbg== -----END CERTIFICATE-----Generated at Mon Jan 26 02:26:08 2026 by rpki-client